PT-2012-4757

CVE-2012-3492

Published

2012-09-28

Updated

2012-10-03

Description by

CVSS 2.0

6.4

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3

Description The issue concerns the filesystem authentication in Condor, where authentication directories with weak permissions are used. This allows remote attackers to impersonate users by renaming a user's authentication directory.

Recommendations For Condor versions 7.6.x through 7.6.9, update to version 7.6.10 or later. For Condor versions 7.8.x through 7.8.3, update to version 7.8.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-287: Improper Authentication

Related identifiers

CVE-2012-3492

RHSA-2012:1278